JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.8.96.171

204.8.96.171 was found in our database!

This IP was reported 206 times. Confidence of Abuse is 27%: ?

27%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Quintex Alliance Consulting
Usage Type	Commercial
ASN	AS62744
Hostname(s)	tor82.quintex.com
Domain Name	quintex.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.8.96.171

Whois 204.8.96.171

IP Abuse Reports for 204.8.96.171:

This IP address has been reported a total of 206 times from 64 distinct sources. 204.8.96.171 was first reported on April 15th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-14 00:03:22 (2 days ago)	Blocked by UFW (TCP on 53196) Source port: 443 TTL: 54 Packet length: 76 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 53196) Source port: 443 TTL: 54 Packet length: 76 TOS: 0x08 This report (for 204.8.96.171) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-13 08:39:39 (3 days ago)	Blocked by UFW (TCP on 46822) Source port: 444 TTL: 54 Packet length: 76 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 46822) Source port: 444 TTL: 54 Packet length: 76 TOS: 0x08 This report (for 204.8.96.171) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-12 17:29:13 (3 days ago)	Blocked by UFW (TCP on 51330) Source port: 445 TTL: 54 Packet length: 76 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 51330) Source port: 445 TTL: 54 Packet length: 76 TOS: 0x08 This report (for 204.8.96.171) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-12 02:10:19 (4 days ago)	Blocked by UFW (TCP on 51434) Source port: 444 TTL: 54 Packet length: 76 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 51434) Source port: 444 TTL: 54 Packet length: 76 TOS: 0x08 This report (for 204.8.96.171) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 oncord	2026-07-10 21:04:28 (5 days ago)	Form spam	Web Spam
Anonymous	2026-07-08 02:49:48 (1 week ago)	Aggressive web scan	Web App Attack
Anonymous	2026-07-02 12:01:10 (1 week ago)	2026-07-02 04:01:02,875 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.171 2026-07-02 ... show more 2026-07-02 04:01:02,875 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.171 2026-07-02 07:00:30,115 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.171 2026-07-02 10:00:23,239 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.171 2026-07-02 13:00:16,172 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.171 2026-07-02 15:00:57,795 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.171 show less	Brute-Force
🇺🇸 gu-alvareza	2026-02-13 07:05:04 (5 months ago)	Generic.Path.Traversal.Detection	Port Scan
🇺🇸 gu-alvareza	2026-02-06 07:05:07 (5 months ago)	HTTP.URI.Script.XSS	Hacking
🇺🇸 TPI-Abuse	2026-02-04 16:17:17 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 204.8.96.171 (tor82.quintex.com): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 204.8.96.171 (tor82.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 11:17:11.574419 2026] [security2:error] [pid 1781871:tid 1781871] [client 204.8.96.171:60562] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|calfirstrealty.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "calfirstrealty.net"] [uri "/xmlrpc.php"] [unique_id "aYNxBwoUz4lP_6PLu21w2gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-04 15:25:54 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 204.8.96.171 (tor82.quintex.com): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 204.8.96.171 (tor82.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 10:25:48.891786 2026] [security2:error] [pid 31009:tid 31009] [client 204.8.96.171:54130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|butterflybuilders.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "butterflybuilders.net"] [uri "/xmlrpc.php"] [unique_id "aYNk_PzNbrvLNQONa-7IoAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Hmorrin	2026-02-02 11:15:54 (5 months ago)		Port Scan
🇺🇸 gu-alvareza	2026-02-02 07:05:04 (5 months ago)	Nessus.Scanner	Port Scan
🇮🇩 securejdprop	2026-02-02 01:25:05 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇺🇸 gu-alvareza	2026-02-01 07:05:09 (5 months ago)	HTTP.URI.SQL.Injection	SQL Injection Web App Attack

Showing 1 to 15 of 206 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 196.203.63.80

🇺🇸 162.216.149.112

🇹🇭 202.29.228.248

🇨🇳 180.153.236.178

🇬🇧 154.16.44.44

🇪🇸 149.91.99.37

🇨🇦 144.217.74.127

🇺🇸 76.12.128.249

🇺🇸 47.253.221.248

🇬🇧 35.203.210.41

🇷🇴 2.57.121.25

🇩🇪 2a0e:7b85:2c81:f493:7d38:ff2:5b6f:69c0

🇩🇪 2a0e:7b84:ea3a:bc23:7ea:4e51:1da7:7d9a

🇩🇪 2a0e:7b84:8a73:ba5a:1773:e050:3e90:e3ca

🇳🇿 121.73.168.107

🇧🇷 45.5.4.179

🇩🇪 2a0e:7b84:5e81:3719:6490:b126:bf0d:ada5

🇺🇸 2604:a880:400:d1:0:4:a53b:1001

🇩🇪 185.242.3.195

🇺🇸 165.154.173.226